kumogata-template 0.0.1

data/template/iam-managed-policy.rb

@@ -0,0 +1,28 @@
+#
+# IAM ManagedPolicty
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html
+#
+require 'kumogata/template/helper'
+require 'kumogata/template/iam'
+
+name = _resource_name(args[:name], "managed policy")
+description = args[:description] || ""
+groups = _ref_array("groups", args)
+path = args[:path] || "/"
+roles = _ref_array("roles", args)
+users = _ref_array("users", args)
+
+_(name) do
+  Type "AWS::IAM::ManagedPolicy"
+  Properties do
+    Description description unless description.empty?
+    Groups groups unless groups.empty?
+    Path path
+    PolicyDocument do
+      Version "2012-10-17"
+      Statement _iam_policy_document("policy_document", args)
+    end
+    Roles roles unless roles.empty?
+    Users users unless users.empty?
+  end
+end

data/template/iam-policy.rb

@@ -0,0 +1,26 @@
+#
+# IAM Policy resource
+# https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
+#
+require 'kumogata/template/helper'
+require 'kumogata/template/iam'
+
+name = _resource_name(args[:name], "policy")
+groups = _ref_array("groups", args, "group")
+policy = _ref_name("policy", args)
+roles = _ref_array("roles", args, "role")
+users = _ref_array("users", args, "user")
+
+_(name) do
+  Type "AWS::IAM::Policy"
+  Properties do
+    Groups groups unless groups.empty?
+    PolicyDocument do
+      Version "2012-10-17"
+      Statement _iam_policy_document("policy_document", args)
+    end
+    PolicyName policy
+    Roles roles unless roles.empty?
+    Users users unless users.empty?
+  end
+end

data/template/iam-role.rb

@@ -0,0 +1,21 @@
+#
+# IAM role resource
+# https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
+#
+require 'kumogata/template/helper'
+require 'kumogata/template/iam'
+
+name = _resource_name(args[:name], "role")
+service = args[:service] || "ec2"
+path = args[:path] || "/"
+
+_(name) do
+  Type "AWS::IAM::Role"
+  Properties do
+    AssumeRolePolicyDocument do
+      Version "2012-10-17"
+      Statement _iam_assume_role_policy_document(service)
+    end
+    Path path
+  end
+end

data/template/iam-user-to-group-addition.rb

@@ -0,0 +1,17 @@
+#
+# IAM UserToGroupAddition
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html
+#
+require 'kumogata/template/helper'
+
+name = _resource_name(args[:name], "user to group addition")
+group = _ref_string("group", args)
+users = _ref_array("users", args)
+
+_(name) do
+  Type "AWS::IAM::UserToGroupAddition"
+  Properties do
+    GroupName group
+    Users users
+  end
+end

data/template/iam-user.rb

@@ -0,0 +1,24 @@
+#
+# IAM User resource
+# https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html
+#
+require 'kumogata/template/helper'
+require 'kumogata/template/iam'
+
+name = _resource_name(args[:name], "user")
+group = _ref_array("group", args)
+login_profile = args[:login_profile] || ""
+manaegd_policy_arns = args[:managed_policy_arns] || []
+path = args[:path] || "/"
+policies = _iam_policies("policies", args)
+
+_(name) do
+  Type "AWS::IAM::User"
+  Properties do
+    Group group unless group.empty?
+    LoginProfile login_profile unless login_profile.empty?
+    ManagedPolicyArns manaegd_policy_arns unless manaegd_policy_arns.empty?
+    Path path
+    Policies policies unless policies.empty?
+  end
+end

data/template/lambda-alias.rb

@@ -0,0 +1,21 @@
+#
+# Lambda alias resource
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-alias.html
+#
+require 'kumogata/template/helper'
+
+name = _resource_name(args[:name], "lambda alias")
+description = args[:description] || ""
+function_name = _ref_attr_string("function_name", "Arn", args, "lambda function")
+function_version = _ref_attr_string("function_version", "Version", args, "lambda version")
+alias_name = _ref_name("alias_name", args)
+
+_(name) do
+  Type "AWS::Lambda::Alias"
+  Properties do
+    Description description unless description.empty?
+    FunctionName function_name
+    FunctionVersion function_version
+    Name alias_name
+  end
+end

data/template/lambda-event-source-mapping.rb

@@ -0,0 +1,24 @@
+#
+# Lambda event-source-mapping resource
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-eventsourcemapping.html
+#
+require 'kumogata/template/helper'
+
+name = _resource_name(args[:name], "lambda event source mapping")
+batch_size = args[:batch_size] || 100
+enabled = _bool("enabled", args, true)
+event_source = _ref_attr_string("event_source", "Arn", args, args[:event_source_prefix])
+function_name = _ref_attr_string("function_name", "Arn", args, "lambda function")
+starting_position = _valid_values(args[:starting_position],
+                                  %w( trim_horizon latest ), "latest")
+
+_(name) do
+  Type "AWS::Lambda::EventSourceMapping"
+  Properties do
+    BatchSize batch_size
+    Enabled enabled
+    EventSourceArn event_source
+    FunctionName function_name
+    StartingPosition starting_position.upcase
+  end
+end

data/template/lambda-function.rb

@@ -0,0 +1,34 @@
+#
+# Lambda function resource
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html
+#
+require 'kumogata/template/helper'
+require 'kumogata/template/lambda'
+
+name = _resource_name(args[:name], "lambda function")
+code = _lambda_function_code(args)
+description = args[:description] || ""
+function_name = args[:function_name] || ""
+handler = args[:handler]
+memory_size = args[:memory_size] || 128
+role = _ref_attr_string("role", "Arn", args, "role")
+role = _ref_string("role_arn", args, "role") if role.empty?
+runtime = _valid_values(args[:runtime],
+                        %w( nodejs nodejs4.3 java8 python2.7 ), "python2.7")
+timeout = args[:timeout] || 3
+vpc_config = _lambda_vpc_config(args)
+
+_(name) do
+  Type "AWS::Lambda::Function"
+  Properties do
+    Code code
+    Description description unless description.empty?
+    FunctionName function_name unless function_name.empty?
+    Handler handler
+    MemorySize memory_size
+    Role role
+    Runtime runtime
+    Timeout timeout
+    VpcConfig vpc_config unless vpc_config.empty?
+  end
+end

data/template/lambda-permission.rb

@@ -0,0 +1,26 @@
+#
+# Lambda permission resource
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html
+#
+require 'kumogata/template/helper'
+
+name = _resource_name(args[:name], "lambda permission")
+action = args[:action] || "lambda:*"
+function_name = _ref_attr_string("function_name", "Arn", args, "lambda function")
+principal = _valid_values(args[:principal],
+                          %w( s3.amazonaws.com sns.amazonaws.com ),
+                          "sns.amazonaws.com")
+source_account = _ref_string("source_account", args, "account id")
+source_prefix = (principal == "s3.amazonaws") ? "bucket" : "topic"
+source_arn = _ref_string("source_arn", args, source_prefix)
+
+_(name) do
+  Type "AWS::Lambda::Permission"
+  Properties do
+    Action action
+    FunctionName function_name
+    Principal principal
+    SourceAccount source_account unless source_account.empty?
+    SourceArn source_arn unless source_arn.empty?
+  end
+end

data/template/lambda-version.rb

@@ -0,0 +1,19 @@
+#
+# Lambda version resource
+# http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-version.html
+#
+require 'kumogata/template/helper'
+
+name = _resource_name(args[:name], "lambda version")
+code_sha256 = args[:code_sha256] || ""
+description = args[:description] || ""
+function_name = _ref_attr_string("function_name", "Arn", args, "lambda function")
+
+_(name) do
+  Type "AWS::Lambda::Version"
+  Properties do
+    CodeSha256 code_sha256 unless code_sha256.empty?
+    Description description unless description.empty?
+    FunctionName function_name
+  end
+end

data/template/mappings-ec2.rb

@@ -0,0 +1,85 @@
+#
+# Mappings EC2
+#
+require 'kumogata/template/helper'
+
+AWSInstanceType2Arch do
+  EC2_INSTANCE_TYPES.each do |type|
+    _(type) do
+      Arch "HVM64"
+    end
+  end
+end
+
+# Amazon Linux AMI (HVM / 64-bit)
+# https://aws.amazon.com/marketplace/pp/B00CIYTQTC/ref=srh_res_product_title?ie=UTF8&sr=0-3&qid=1460447105907
+AWSRegionArch2AMIAmazonLinuxOfficial do
+  # 2016.03
+  image_id = {
+    virginia: "08111162",
+    oregon: "c229c0a2",
+    california: "1b0f7d7b",
+    frankfurt: "e2df388d",
+    ireland: "31328842",
+    singapore: "e90dc68a",
+    sydney: "f2210191",
+    tokyo: "f80e0596",
+    seoul: "6598510b",
+    saopaulo: "1e159872",
+  }
+
+  AWS_REGION.each do |key, region|
+    _(region) do
+      HVM64 "ami-#{image_id[key]}"
+    end
+  end
+end
+
+# CentOS 7 (x86_64) with Updates HVM
+# https://aws.amazon.com/marketplace/ordering/ref=dtl_psb_continue?ie=UTF8&productId=b7ee8a69-ee97-4a49-9e68-afaee216db2e
+AWSRegionArch2AMICentos7Official do
+  # 1602, released 02/26/2016
+  image_id = {
+    virginia: "6d1c2007",
+    oregon: "d2c924b2",
+    california: "af4333cf",
+    ireland: "7abd0209",
+    frankfurt: "9bf712f4",
+    singapore: "f068a193",
+    tokyo: "eec1c380",
+    sydney: "fedafc9d",
+    seoul: "c74789a9",
+    saopaulo: "26b93b4a",
+  }
+
+  AWS_REGION.each do |key, region|
+    _(region) do
+      HVM64 "ami-#{image_id[key]}"
+    end
+  end
+end
+
+# Ubuntu Server 16.04 LTS
+# https://cloud-images.ubuntu.com/locator/ec2/
+AWSRegionArch2AMIUbuntu16Official do
+  # 16.04 LTS 20160420.3
+  image_id = {
+    virginia: "840910ee",
+    oregon:	"fa82739a",
+    california: "fa82739a",
+    frankfurt: "f0eb089f",
+    ireland: "3079f543",
+    singapore: "a5416cc6",
+    sydney: "a5416cc6",
+    tokyo: "3c5f4152",
+    seoul: "a5416cc6",
+    saopaulo: "567cf23a",
+  }
+
+  AWS_REGION.each do |key, region|
+    _(region) do
+      HVM64 "ami-#{image_id[key]}"
+    end
+  end
+end
+

data/template/output-access-key.rb

@@ -0,0 +1,6 @@
+#
+# Output access key
+#
+
+_output "#{args[:name]} access key", ref_value: args[:name]
+_output "#{args[:name]} secret access key", ref_value: [ args[:name], "SecretAccessKey" ]

data/template/output-arn.rb

@@ -0,0 +1,6 @@
+#
+# Output name + arn
+#
+
+_output "#{args[:name]} name", ref_value: args[:name]
+_output "#{args[:name]} arn", ref_value: [ args[:name], "Arn" ]

data/template/output-autoscaling.rb

@@ -0,0 +1,6 @@
+#
+# Output autoscaling
+#
+
+_output "#{args[:name]} autoscaling group", ref_value: "#{args[:name]} autoscaling group"
+_output "#{args[:name]} autoscaling launch configuration", ref_value: "#{args[:name]} autoscaling launch configuration"

data/template/output-az.rb

@@ -0,0 +1,6 @@
+#
+# Output AZ
+#
+
+_output "#{args[:name]} name", ref_value: args[:name]
+_output "#{args[:name]} cidr", ref_value: [ args[:name], "AvailabilityZone" ]

data/template/output-dynamodb.rb

@@ -0,0 +1,6 @@
+#
+# Output dynanmodb
+#
+
+_output "#{args[:name]} table", ref_value: "#{args[:name]} table"
+_output "#{args[:name]} table", ref_value: [ "#{args[:name]} table", "StreamArn" ] if args.key? :stream

data/template/output-ec2.rb

@@ -0,0 +1,8 @@
+#
+# Output ec2
+#
+
+_output "#{args[:name]} instance", ref_value: "#{args[:name]} instance"
+_output "#{args[:name]} instance az", ref_value: [ "#{args[:name]} instance", "AvailabilityZone" ]
+_output "#{args[:name]} instance public ip", ref_value: [ "#{args[:name]} instance", "PublicIp" ] if args.key? :public_ip
+_output "#{args[:name]} instance private ip", ref_value: [ "#{args[:name]} instance", "PrivateIp" ]

data/template/output-elasticache.rb

@@ -0,0 +1,30 @@
+#
+# Output elastiacche
+#
+require 'kumogata/template/helper'
+
+replication = args[:replication] || false
+engine = _valid_values(args[:engine], %w( memcached redis ), ELASTICACHE_DEFAULT_ENGINE)
+
+if replication
+  if engine == "redis"
+    _output "#{args[:name]} cache replication group",
+             ref_value: "#{args[:name]} cache replication group"
+    _output "#{args[:name]} cache replication group primary address",
+            ref_value: [ "#{args[:name]} cache replication group", "PrimaryEndPoint.Address" ]
+    _output "#{args[:name]} cache replication group primary port",
+             ref_value: [ "#{args[:name]} cache replication group", "PrimaryEndPoint.Port" ]
+    _output "#{args[:name]} cache replication group read addresses",
+             ref_value: [ "#{args[:name]} cache replication group", "ReadEndPoint.Addresses" ]
+    _output "#{args[:name]} cache replication group read ports",
+             ref_value: [ "#{args[:name]} cache replication group", "ReadEndPoint.Ports" ]
+  end
+else
+  _output "#{args[:name]} cache cluster", ref_value: "#{args[:name]} cache cluster"
+  if engine == "memcached"
+    _output "#{args[:name]} cache cluster address",
+            ref_value: [ "#{args[:name]} cache cluster", "ConfigurationEndpoint.Address" ]
+    _output "#{args[:name]} cache cluster port",
+            ref_value: [ "#{args[:name]} cache cluster", "ConfigurationEndpoint.Port" ]
+  end
+end

data/template/output-elb.rb

@@ -0,0 +1,12 @@
+#
+# Output elb
+#
+
+_output "#{args[:name]} load balancer",
+        ref_value: "#{args[:name]} load balancer"
+_output "#{args[:name]} load balancer dns name",
+        ref_value: [ "#{args[:name]} load balancer", "DNSName" ]
+_output "#{args[:name]} load balancer security group name",
+        ref_value: [ "#{args[:name]} load balancer", "SourceSecurityGroup.GroupName" ]
+_output "#{args[:name]} load balancer securiry group owner",
+        ref_value: [ "#{args[:name]} load balancer", "SourceSecurityGroup.OwnerAlias" ]

data/template/output-emr.rb

@@ -0,0 +1,6 @@
+#
+# output emr
+#
+
+_output "#{args[:name]} emr cluster", ref_value: "#{args[:name]} emr cluster"
+_output "#{args[:name]} emr cluster master public dns", ref_value: [ "#{args[:name]} emr cluster", "MasterPublicDNS" ]